diff --git a/v2/pkg/catalog/loader/filter/tag_filter.go b/v2/pkg/catalog/loader/filter/tag_filter.go index 9f060b27..08743cb7 100644 --- a/v2/pkg/catalog/loader/filter/tag_filter.go +++ b/v2/pkg/catalog/loader/filter/tag_filter.go @@ -82,7 +82,7 @@ func (t *TagFilter) MatchWithAllowedTags(allowed []string, tag, author, severity matchedAny = true } _, ok := t.block[tag] - if ok { + if ok && !matchedAny { if _, allowOk := t.matchAllows[tag]; allowOk { return true, nil }